1 to 25 of 307 SIEM Jobs in England

ITIL service management processes, particularly Incident, Request, Change, and Problem management. Understanding of GDPR, data protection, and information governance. Hands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent). Experience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR). Experience ...

Strong experience across security operations, incident response, vulnerability management, and threat detection. Technical knowledge of: Identity management and access controls PKI and cryptographic services SIEM platforms and log analytics Firewalls, boundary protection, and secure networking Endpoint security and system hardening Hands-on implementation experience of frameworks such as: NIST ...

network segmentation VPN technologies Network monitoring and performance management Cloud networking and hybrid environments IDS/IPS technologies Secure network architecture principles Knowledge of SIEM, SOAR, endpoint security, vulnerability management, and threat intelligence platforms. Understanding of modern cyber threats, attack techniques, and defensive security controls. Desirable Qualifications ISO 27001 Lead ...

and security monitoring functions. Strong knowledge of cyber incident response, digital investigations, and security event management. Experience operating and managing security technologies such as SIEM, EDR, firewalls, IDS/IPS, web security gateways, and network access controls. Strong understanding of enterprise network security principles and architectures. Experience managing security incidents ...

security-related issues Overseeing security operations, incident response and vulnerability management Supporting secure Azure and AWS environments Managing and optimising security tooling including SIEM, EDR and related platforms Reviewing projects, infrastructure changes and technical designs from a security perspective Driving secure-by-design principles across technology initiatives Managing third-party ...

cyber security with leadership or ownership of security functions. Strong knowledge of network, application, cloud (AWS/Azure), and endpoint security. Handson experience with SIEM (e.g., Arctic Wolf), Fortinet firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls ...

security policies, logging and monitoring, and integrating advanced solutions such as IDS/IPS, NAC, and network segmentation. Management & Monitoring: Proficient with SNMP, syslog, SIEM, and network automation, capacity planning and monitoring tools including introducing such tooling. Threat Landscape: Deep understanding of common networking attack vectors and defense-in-depth ...

cloud platforms - AWS, Azure, Google Cloud Ensure cloud platforms config meets best practise/compliance Manage security vendors Conduct risk assessments Monitor security events - SIEM, IDS/IPS, Sentinel1 Lead incident response, coordinate with vendors during breach Ensure compliance with regulations - GDPR, HIPAA, PCI-DSS, ISO27001, NIST Work with ...

Experience developing and delivering information security strategy, roadmaps, policies and controls. Practical knowledge of security technologies and business systems, including identity and access management, SIEM, endpoint security, cloud security, vulnerability management and remote working technologies. Experience using technology, automation or AI to improve security outcomes or operational efficiency. Experience managing ...

take the next step into people leadership. You'll bring: Strong experience with security monitoring, threat detection and incident response. Hands-on knowledge of SIEM, SOAR and security tooling. A passion for improving detection capabilities and automating security operations. The confidence to mentor others and influence technical decisions. Excellent communication ...

remediation actions Security project experience Excellent problem-solving and communication skills Ability to work independently and proactively improve security operations Desirable Skills Experience with SIEM technologies Familiarity with vulnerability management and patching processes Knowledge of Microsoft 365 security technologies Security certifications such as Security+ ...

certification (e.g., CISSP, CISM, SANS) with ongoing professional development Experience with cloud security controls and monitoring (e.g., Microsoft 365/Azure). Experience with SIEM/SOAR, detection engineering or incident automation. Experience implementing IAM tooling and access governance (e.g., PAM, IGA). Experience commissioning security testing and remediation programmes ...

/Azure), and endpoint security. Ability to analyse vulnerabilities, threats, procedures and architectural design, producing reports and sharing intelligence. Hands-on experience with SIEM (e.g., Arctic Wolf), Fortinet firewalls, Nessus, and vulnerability remediation. Experience working with SOC teams and supplier security assessments. Familiarity with CAF, CE+, NIST, CIS Controls ...

assurance, including evidence gathering and remediation planning. Experience leading incident response, including major cyber events and multi-agency or cross-organisational coordination. Experience managing SIEM platforms, security monitoring or SOC environments. Experience developing and delivering cyber strategies, programmes and roadmaps. Strong track record of supplier assurance, contract cyber compliance and ...

response playbooks and operational runbooks, validating them through real incidents and simulations. Support the optimisation and tuning of security monitoring and detection capabilities, including SIEM and endpoint tooling, to improve signal quality and reduce false positives. Support the execution of the end-to-end vulnerability management process, including validation … security incidents, trends and operational risks, escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future ...

management, governance, and incident response. Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM, EDR, DLP, IDP, IPS. Hands‐on experience with vulnerability management, identifying, prioritising, and driving remediation across the estate. Strong communication skills, with the ability ...

security controls and processes. About you You will have extensive experience of security monitoring and incident response, along with experience working with SIEM platforms, endpoint detection and response (EDR) tools, and email security solutions. You'll be proficient in securing Microsoft 365 and Azure environments (including Entra ID, Intune, Purview ...

and colleagues. Essential skills Strong experience designing and implementing technical security systems and controls. Advanced knowledge of at least three security technologies, such as SIEM, Defender, Sentinel, EDR/XDR, Active Directory, Nessus, PAM, AWS IAM or Entra. Extensive knowledge of security controls across Windows, Linux, mainframe, AWS or Azure ...

Security Architect, Solutions Architect, or Security Design Lead within a complex enterprise environment. Strong background across multiple security domains, including Identity & Access Management, SIEM, Cyber Threat Intelligence, Data Security, Application Security, Network Security, and Privileged Access Management. Experience designing security solutions across cloud, infrastructure, networking, automation, containerisation, and end-user ...

Zero Trust technologies, while managing project teams and vendor relationships to ensure successful delivery. Leading integration of Zero Trust solutions with identity providers, SIEM/SOAR systems, and endpoint platforms, presenting technical solutions to clients and supporting pre-sales activities. Conducting proof-of-concept evaluations, vendor bake-offs and technical ...

mitigation Strong understanding of network security architecture and boundary security design Proficiency in security incident investigation and threat analysis Knowledge of security event management, SIEM and log analysis Understanding of vulnerability assessment and remediation processes Familiarity with MOD security requirements, Classification Guides and defence standards Knowledge of managed service delivery ...

Virtualisation: Hyper-V, VMware; cloud platforms (Azure, AWS, GCP). Communication Systems: VoIP, IP CCTV. Backup & DR: Veeam, replication, failover. Security: Firewalls, endpoint protection, SIEM tools (Splunk, Sentinel); ISO 27001, GDPR compliance. OS & Tools: Linux, PowerShell/Bash/Python scripting, ITSM platforms (ServiceNow, Fresh Service). A great opportunity ...

Operations Centre (SOC). Strong incident detection, investigation and response experience. Deep understanding of network and host-based attack techniques. Hands-on experience with SIEM technologies such as Microsoft Sentinel or Splunk. Experience leading, coaching or mentoring analysts in an operational security environment. It would be great ...

function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24×7 detection, response, threat hunting), DFIR, purple ...

Assisting with Zero Trust Client configuration and rollout, including secure network and data access. Integrate Zero Trust solutions with identity providers (Entra AD, Okta), SIEM/SOAR systems, endpoint platforms, and data repositories. Assisting infrastructure teams in migrating legacy VPN, proxy, and firewall solutions to cloud native Zero Trust models ...